@repo-prism/dispatch-hub 1.1.16 → 1.1.17

package/README.md

@@ -4,7 +4,8 @@ Loopback dashboard and OS notifications for Prism Dispatch jobs (ADR-0043).
 
 The host MCP server (`prism-mcp`) spawns this daemon when a chat session
 starts. It binds `127.0.0.1:17330`, watches every registered workspace's
-`.prism/dispatch/` tree, and serves a live jobs board.
+`.prism/dispatch/` tree, and serves a live jobs board at
+`http://prismhq.localhost:17330` (ADR-0048).
 
 ```text
 npx prism-hub

package/dist/Prism.app/Contents/Info.plist

@@ -0,0 +1,16 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>CFBundleExecutable</key>
+  <string>prism-notify</string>
+  <key>CFBundleIdentifier</key>
+  <string>in.prismhq.notify</string>
+  <key>CFBundleName</key>
+  <string>Prism</string>
+  <key>CFBundlePackageType</key>
+  <string>APPL</string>
+  <key>LSUIElement</key>
+  <true/>
+</dict>
+</plist>

package/dist/auth.d.ts

@@ -1,5 +1,13 @@
 import type { IncomingMessage } from "node:http";
+/**
+ * The Origin allowlist is the defence against DNS rebinding (ADR-0048): a
+ * hostile page cannot be stopped from *resolving* a name to 127.0.0.1, so what
+ * stops it reading the Console is that its own origin is not on this list. The
+ * token is checked separately and always.
+ */
 export declare function originAllowed(origin: string | undefined): boolean;
 export declare function tokenFromRequest(req: IncomingMessage, url: URL): string | undefined;
 export declare function tokensMatch(expected: string, given: string | undefined): boolean;
+export declare const HUB_COOKIE = "prism_hub";
+export declare function hubCookieHeader(token: string): string;
 //# sourceMappingURL=auth.d.ts.map

package/dist/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAIjD,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAQjE;AAED,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,GAAG,GACP,MAAM,GAAG,SAAS,CAiBpB;AAED,wBAAgB,WAAW,CACzB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,GAAG,SAAS,GACxB,OAAO,CAET"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAKjD;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAiBjE;AAED,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,GAAG,GACP,MAAM,GAAG,SAAS,CAiBpB;AAED,wBAAgB,WAAW,CACzB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,GAAG,SAAS,GACxB,OAAO,CAET;AAED,eAAO,MAAM,UAAU,cAAc,CAAC;AAEtC,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAErD"}

package/dist/auth.js

@@ -1,10 +1,27 @@
+import { CONSOLE_ALIAS_HOST } from "./paths.js";
 const LOOPBACK = new Set(["127.0.0.1", "localhost", "::1", "[::1]"]);
+/**
+ * The Origin allowlist is the defence against DNS rebinding (ADR-0048): a
+ * hostile page cannot be stopped from *resolving* a name to 127.0.0.1, so what
+ * stops it reading the Console is that its own origin is not on this list. The
+ * token is checked separately and always.
+ */
 export function originAllowed(origin) {
     if (!origin)
         return true;
     try {
         const url = new URL(origin);
-        return LOOPBACK.has(url.hostname);
+        if (LOOPBACK.has(url.hostname))
+            return true;
+        // RFC 6761 reserves `.localhost`, and every current browser resolves it to
+        // loopback without a DNS lookup. `prismhq.localhost` and any other label
+        // under it can only ever reach this machine.
+        if (url.hostname === "localhost" || url.hostname.endsWith(".localhost")) {
+            return true;
+        }
+        // Opt-in branded name. Accepted by exact hostname so a bookmark still
+        // works if someone later sets PRISM_CONSOLE_ALIAS=1.
+        return url.hostname === CONSOLE_ALIAS_HOST;
     }
     catch {
         return false;
@@ -34,4 +51,8 @@ export function tokenFromRequest(req, url) {
 export function tokensMatch(expected, given) {
     return Boolean(given) && given === expected;
 }
+export const HUB_COOKIE = "prism_hub";
+export function hubCookieHeader(token) {
+    return `${HUB_COOKIE}=${encodeURIComponent(token)}; Path=/; HttpOnly; SameSite=Strict; Max-Age=2592000`;
+}
 //# sourceMappingURL=auth.js.map

package/dist/auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAEA,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;AAErE,MAAM,UAAU,aAAa,CAAC,MAA0B;IACtD,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QAC5B,OAAO,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,GAAoB,EACpB,GAAQ;IAER,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;IACzC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/D,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACrD,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;IAC5B,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC;IACpD,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IACxB,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;IAClC,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/C,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;YACzB,OAAO,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,QAAgB,EAChB,KAAyB;IAEzB,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,QAAQ,CAAC;AAC9C,CAAC"}
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAEhD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;AAErE;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,MAA0B;IACtD,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QAC5B,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;QAC5C,2EAA2E;QAC3E,yEAAyE;QACzE,6CAA6C;QAC7C,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YACxE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,sEAAsE;QACtE,qDAAqD;QACrD,OAAO,GAAG,CAAC,QAAQ,KAAK,kBAAkB,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,GAAoB,EACpB,GAAQ;IAER,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;IACzC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/D,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACrD,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;IAC5B,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC;IACpD,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IACxB,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;IAClC,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/C,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;YACzB,OAAO,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,QAAgB,EAChB,KAAyB;IAEzB,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,QAAQ,CAAC;AAC9C,CAAC;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,WAAW,CAAC;AAEtC,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,OAAO,GAAG,UAAU,IAAI,kBAAkB,CAAC,KAAK,CAAC,sDAAsD,CAAC;AAC1G,CAAC"}

package/dist/dashboard/app.css

@@ -1 +1 @@
-html,body{background:var(--prism-canvas);color:var(--prism-ink);font-family:var(--prism-font,Inter,system-ui,sans-serif);min-height:100%;margin:0}#root{min-height:100vh}.hub{max-width:960px;margin:0 auto;padding:32px 24px 64px}.hub-header{display:flex;justify-content:space-between;align-items: flex-end;gap:16px;margin-bottom:28px}.hub-kicker{color:var(--prism-brand);letter-spacing:.08em;text-transform:uppercase;margin:0 0 4px;font-size:12px}.hub h1{margin:0;font-size:28px;font-weight:600}.hub-meta,.hub-error,.ov-empty{color:var(--prism-ink-muted)}.hub-error{color:var(--prism-rose)}.hub-repo{margin-top:28px}.hub-repo h2{color:var(--prism-ink-muted);margin:0 0 12px;font-size:14px;font-weight:600}.hub-list{list-style:none;display:grid;gap:12px;margin:0;padding:0}.hub-card{background:var(--prism-panel);border:1px solid var(--prism-line);border-radius:12px;padding:16px 18px}.hub-card-top{display:flex;justify-content:space-between;align-items: center;gap:12px}.hub-activity{color:var(--prism-ink-muted);margin:8px 0 0;font-size:14px}.hub-facts{display:flex;flex-wrap:wrap;gap:16px;margin:12px 0 0}.hub-facts dt{text-transform:uppercase;letter-spacing:.06em;color:var(--prism-ink-muted);font-size:11px}.hub-facts dd{margin:2px 0 0;font-size:13px}.hub-facts code{font-family:var(--prism-mono,ui-monospace,monospace);font-size:12px}.hub-pill{text-transform:capitalize;border-radius:999px;padding:2px 10px;font-size:12px}.hub-pill-brand{background:color-mix(in srgb,var(--prism-brand)18%,transparent);color:var(--prism-brand-strong)}.hub-pill-emerald{background:color-mix(in srgb,var(--prism-emerald)18%,transparent);color:var(--prism-emerald)}.hub-pill-rose{background:color-mix(in srgb,var(--prism-rose)18%,transparent);color:var(--prism-rose)}.hub-pill-amber{background:color-mix(in srgb,var(--prism-amber)18%,transparent);color:var(--prism-amber)}.hub-pill-muted{background:var(--prism-tile);color:var(--prism-ink-muted)}.hub-actions{display:flex;gap:8px;margin-top:12px}.hub-actions button{appearance:none;border:1px solid var(--prism-line);background:var(--prism-tile);color:var(--prism-ink);cursor:pointer;font:inherit;border-radius:8px;padding:6px 12px;font-size:13px}.hub-actions button:hover{border-color:var(--prism-brand)}.hub-console{border:1px solid var(--prism-line);background:var(--prism-tile);overflow-y:auto;font-family:var(--prism-font-mono,ui-monospace,monospace);border-radius:8px;max-height:320px;margin-top:12px;padding:10px 12px;font-size:12px;line-height:1.5}.hub-console-empty{color:var(--prism-ink-muted);margin:0}.hub-console-line{color:var(--prism-ink);word-break:break-word;margin:2px 0}.hub-console-phase{color:var(--prism-ink-muted);text-transform:uppercase;letter-spacing:.04em;margin-right:8px;font-size:10px}.hub-console-sub{border-left:2px solid var(--prism-line);color:var(--prism-ink-muted);margin-left:18px;padding-left:8px}.hub-console-err{color:var(--prism-rose,#e11d48)}
+.react-flow{direction:ltr;--xy-edge-stroke-default:#b1b1b7;--xy-edge-stroke-width-default:1;--xy-edge-stroke-selected-default:#555;--xy-connectionline-stroke-default:#b1b1b7;--xy-connectionline-stroke-width-default:1;--xy-attribution-background-color-default:#ffffff80;--xy-minimap-background-color-default:#fff;--xy-minimap-mask-background-color-default:#f0f0f099;--xy-minimap-mask-stroke-color-default:transparent;--xy-minimap-mask-stroke-width-default:1;--xy-minimap-node-background-color-default:#e2e2e2;--xy-minimap-node-stroke-color-default:transparent;--xy-minimap-node-stroke-width-default:2;--xy-background-color-default:transparent;--xy-background-pattern-dots-color-default:#91919a;--xy-background-pattern-lines-color-default:#eee;--xy-background-pattern-cross-color-default:#e2e2e2;background-color:var(--xy-background-color,var(--xy-background-color-default));--xy-node-color-default:inherit;--xy-node-border-default:1px solid #1a192b;--xy-node-background-color-default:#fff;--xy-node-group-background-color-default:#f0f0f040;--xy-node-boxshadow-hover-default:0 1px 4px 1px #00000014;--xy-node-boxshadow-selected-default:0 0 0 .5px #1a192b;--xy-node-border-radius-default:3px;--xy-handle-background-color-default:#1a192b;--xy-handle-border-color-default:#fff;--xy-selection-background-color-default:#0059dc14;--xy-selection-border-default:1px dotted #0059dccc;--xy-controls-button-background-color-default:#fefefe;--xy-controls-button-background-color-hover-default:#f4f4f4;--xy-controls-button-color-default:inherit;--xy-controls-button-color-hover-default:inherit;--xy-controls-button-border-color-default:#eee;--xy-controls-box-shadow-default:0 0 2px 1px #00000014;--xy-edge-label-background-color-default:#fff;--xy-edge-label-color-default:inherit;--xy-resize-background-color-default:#3367d9}.react-flow.dark{--xy-edge-stroke-default:#3e3e3e;--xy-edge-stroke-width-default:1;--xy-edge-stroke-selected-default:#727272;--xy-connectionline-stroke-default:#b1b1b7;--xy-connectionline-stroke-width-default:1;--xy-attribution-background-color-default:#96969640;--xy-minimap-background-color-default:#141414;--xy-minimap-mask-background-color-default:#3c3c3c99;--xy-minimap-mask-stroke-color-default:transparent;--xy-minimap-mask-stroke-width-default:1;--xy-minimap-node-background-color-default:#2b2b2b;--xy-minimap-node-stroke-color-default:transparent;--xy-minimap-node-stroke-width-default:2;--xy-background-color-default:#141414;--xy-background-pattern-dots-color-default:#555;--xy-background-pattern-lines-color-default:#333;--xy-background-pattern-cross-color-default:#333;--xy-node-color-default:#f8f8f8;--xy-node-border-default:1px solid #3c3c3c;--xy-node-background-color-default:#1e1e1e;--xy-node-group-background-color-default:#f0f0f040;--xy-node-boxshadow-hover-default:0 1px 4px 1px #ffffff14;--xy-node-boxshadow-selected-default:0 0 0 .5px #999;--xy-handle-background-color-default:#bebebe;--xy-handle-border-color-default:#1e1e1e;--xy-selection-background-color-default:#c8c8dc14;--xy-selection-border-default:1px dotted #c8c8dccc;--xy-controls-button-background-color-default:#2b2b2b;--xy-controls-button-background-color-hover-default:#3e3e3e;--xy-controls-button-color-default:#f8f8f8;--xy-controls-button-color-hover-default:#fff;--xy-controls-button-border-color-default:#5b5b5b;--xy-controls-box-shadow-default:0 0 2px 1px #00000014;--xy-edge-label-background-color-default:#141414;--xy-edge-label-color-default:#f8f8f8}.react-flow__background{background-color:var(--xy-background-color-props,var(--xy-background-color,var(--xy-background-color-default)));pointer-events:none;z-index:-1}.react-flow__container{position:absolute;width:100%;height:100%;top:0;left:0}.react-flow__pane{z-index:1;touch-action:none}.react-flow__pane.draggable{cursor:grab}.react-flow__pane.dragging{cursor:grabbing}.react-flow__pane.selection{cursor:pointer}.react-flow__viewport{transform-origin:0 0;z-index:2;pointer-events:none}.react-flow__renderer{z-index:4}.react-flow__selection{z-index:6}.react-flow__nodesselection-rect:focus{outline:none}.react-flow__nodesselection-rect:focus-visible{outline:none}.react-flow__edge-path{stroke:var(--xy-edge-stroke,var(--xy-edge-stroke-default));stroke-width:var(--xy-edge-stroke-width,var(--xy-edge-stroke-width-default));fill:none}.react-flow__connection-path{stroke:var(--xy-connectionline-stroke,var(--xy-connectionline-stroke-default));stroke-width:var(--xy-connectionline-stroke-width,var(--xy-connectionline-stroke-width-default));fill:none}.react-flow .react-flow__edges{position:absolute}.react-flow .react-flow__edges svg{overflow:visible;position:absolute;pointer-events:none}.react-flow__edge{pointer-events:visibleStroke}.react-flow__edge.selectable{cursor:pointer}.react-flow__edge.animated path{stroke-dasharray:5;animation:dashdraw .5s linear infinite}.react-flow__edge.animated path.react-flow__edge-interaction{stroke-dasharray:none;animation:none}.react-flow__edge.inactive{pointer-events:none}.react-flow__edge.selected,.react-flow__edge:focus{outline:none}.react-flow__edge:focus-visible{outline:none}.react-flow__edge.selected .react-flow__edge-path,.react-flow__edge.selectable:focus .react-flow__edge-path{stroke:var(--xy-edge-stroke-selected,var(--xy-edge-stroke-selected-default))}.react-flow__edge.selectable:focus-visible .react-flow__edge-path{stroke:var(--xy-edge-stroke-selected,var(--xy-edge-stroke-selected-default))}.react-flow__edge-textwrapper{pointer-events:all}.react-flow__edge .react-flow__edge-text{pointer-events:none;-webkit-user-select:none;-moz-user-select:none;user-select:none}.react-flow__arrowhead polyline{stroke:var(--xy-edge-stroke,var(--xy-edge-stroke-default))}.react-flow__arrowhead polyline.arrowclosed{fill:var(--xy-edge-stroke,var(--xy-edge-stroke-default))}.react-flow__connection{pointer-events:none}.react-flow__connection .animated{stroke-dasharray:5;animation:dashdraw .5s linear infinite}svg.react-flow__connectionline{z-index:1001;overflow:visible;position:absolute}.react-flow__nodes{pointer-events:none;transform-origin:0 0}.react-flow__node{position:absolute;-webkit-user-select:none;-moz-user-select:none;user-select:none;pointer-events:all;transform-origin:0 0;box-sizing:border-box;cursor:default}.react-flow__node.selectable{cursor:pointer}.react-flow__node.draggable{cursor:grab;pointer-events:all}.react-flow__node.draggable.dragging{cursor:grabbing}.react-flow__nodesselection{z-index:3;transform-origin:left top;pointer-events:none}.react-flow__nodesselection-rect{position:absolute;pointer-events:all;cursor:grab}.react-flow__handle{position:absolute;pointer-events:none;background-color:var(--xy-handle-background-color,var(--xy-handle-background-color-default));border:1px solid var(--xy-handle-border-color,var(--xy-handle-border-color-default));border-radius:100%;width:6px;min-width:5px;height:6px;min-height:5px}.react-flow__handle.connectingfrom{pointer-events:all}.react-flow__handle.connectionindicator{pointer-events:all;cursor:crosshair}.react-flow__handle-bottom{top:auto;bottom:0;left:50%;transform:translate(-50%,50%)}.react-flow__handle-top{top:0;left:50%;transform:translate(-50%,-50%)}.react-flow__handle-left{top:50%;left:0;transform:translate(-50%,-50%)}.react-flow__handle-right{top:50%;right:0;transform:translate(50%,-50%)}.react-flow__edgeupdater{cursor:move;pointer-events:all}.react-flow__pane.selection .react-flow__panel{pointer-events:none}.react-flow__panel{position:absolute;z-index:5;margin:15px}.react-flow__panel.top{top:0}.react-flow__panel.bottom{bottom:0}.react-flow__panel.top.center,.react-flow__panel.bottom.center{left:50%;transform:translate(-15px)translate(-50%)}.react-flow__panel.left{left:0}.react-flow__panel.right{right:0}.react-flow__panel.left.center,.react-flow__panel.right.center{top:50%;transform:translateY(-15px)translateY(-50%)}.react-flow__attribution{background:var(--xy-attribution-background-color,var(--xy-attribution-background-color-default));margin:0;padding:2px 3px;font-size:10px}.react-flow__attribution a{text-decoration:none;color:#999}@keyframes dashdraw{0%{stroke-dashoffset:10}}.react-flow__edgelabel-renderer{position:absolute;pointer-events:none;-webkit-user-select:none;-moz-user-select:none;user-select:none;width:100%;height:100%;top:0;left:0}.react-flow__viewport-portal{position:absolute;-webkit-user-select:none;-moz-user-select:none;user-select:none;width:100%;height:100%;top:0;left:0}.react-flow__minimap{background:var(--xy-minimap-background-color-props,var(--xy-minimap-background-color,var(--xy-minimap-background-color-default)))}.react-flow__minimap-svg{display:block}.react-flow__minimap-mask{fill:var(--xy-minimap-mask-background-color-props,var(--xy-minimap-mask-background-color,var(--xy-minimap-mask-background-color-default)));stroke:var(--xy-minimap-mask-stroke-color-props,var(--xy-minimap-mask-stroke-color,var(--xy-minimap-mask-stroke-color-default)));stroke-width:var(--xy-minimap-mask-stroke-width-props,var(--xy-minimap-mask-stroke-width,var(--xy-minimap-mask-stroke-width-default)))}.react-flow__minimap-node{fill:var(--xy-minimap-node-background-color-props,var(--xy-minimap-node-background-color,var(--xy-minimap-node-background-color-default)));stroke:var(--xy-minimap-node-stroke-color-props,var(--xy-minimap-node-stroke-color,var(--xy-minimap-node-stroke-color-default)));stroke-width:var(--xy-minimap-node-stroke-width-props,var(--xy-minimap-node-stroke-width,var(--xy-minimap-node-stroke-width-default)))}.react-flow__background-pattern.dots{fill:var(--xy-background-pattern-color-props,var(--xy-background-pattern-color,var(--xy-background-pattern-dots-color-default)))}.react-flow__background-pattern.lines{stroke:var(--xy-background-pattern-color-props,var(--xy-background-pattern-color,var(--xy-background-pattern-lines-color-default)))}.react-flow__background-pattern.cross{stroke:var(--xy-background-pattern-color-props,var(--xy-background-pattern-color,var(--xy-background-pattern-cross-color-default)))}.react-flow__controls{display:flex;box-shadow:var(--xy-controls-box-shadow,var(--xy-controls-box-shadow-default));flex-direction:column}.react-flow__controls.horizontal{flex-direction:row}.react-flow__controls-button{display:flex;background:var(--xy-controls-button-background-color,var(--xy-controls-button-background-color-default));border:none;border-bottom:1px solid var(--xy-controls-button-border-color-props,var(--xy-controls-button-border-color,var(--xy-controls-button-border-color-default)));color:var(--xy-controls-button-color-props,var(--xy-controls-button-color,var(--xy-controls-button-color-default)));cursor:pointer;-webkit-user-select:none;-moz-user-select:none;user-select:none;justify-content:center;align-items: center;width:26px;height:26px;padding:4px}.react-flow__controls-button svg{fill:currentColor;width:100%;max-width:12px;max-height:12px}.react-flow__edge.updating .react-flow__edge-path{stroke:#777}.react-flow__edge-text{font-size:10px}.react-flow__node.selectable:focus{outline:none}.react-flow__node.selectable:focus-visible{outline:none}.react-flow__node-input,.react-flow__node-default,.react-flow__node-output,.react-flow__node-group{border-radius:var(--xy-node-border-radius,var(--xy-node-border-radius-default));color:var(--xy-node-color,var(--xy-node-color-default));text-align:center;border:var(--xy-node-border,var(--xy-node-border-default));background-color:var(--xy-node-background-color,var(--xy-node-background-color-default));width:150px;padding:10px;font-size:12px}.react-flow__node-input.selectable:hover,.react-flow__node-default.selectable:hover,.react-flow__node-output.selectable:hover,.react-flow__node-group.selectable:hover{box-shadow:var(--xy-node-boxshadow-hover,var(--xy-node-boxshadow-hover-default))}.react-flow__node-input.selectable.selected,.react-flow__node-input.selectable:focus,.react-flow__node-default.selectable.selected,.react-flow__node-default.selectable:focus,.react-flow__node-output.selectable.selected,.react-flow__node-output.selectable:focus,.react-flow__node-group.selectable.selected,.react-flow__node-group.selectable:focus{box-shadow:var(--xy-node-boxshadow-selected,var(--xy-node-boxshadow-selected-default))}.react-flow__node-input.selectable:focus-visible{box-shadow:var(--xy-node-boxshadow-selected,var(--xy-node-boxshadow-selected-default))}.react-flow__node-default.selectable:focus-visible{box-shadow:var(--xy-node-boxshadow-selected,var(--xy-node-boxshadow-selected-default))}.react-flow__node-output.selectable:focus-visible{box-shadow:var(--xy-node-boxshadow-selected,var(--xy-node-boxshadow-selected-default))}.react-flow__node-group.selectable:focus-visible{box-shadow:var(--xy-node-boxshadow-selected,var(--xy-node-boxshadow-selected-default))}.react-flow__node-group{background-color:var(--xy-node-group-background-color,var(--xy-node-group-background-color-default))}.react-flow__nodesselection-rect,.react-flow__selection{background:var(--xy-selection-background-color,var(--xy-selection-background-color-default));border:var(--xy-selection-border,var(--xy-selection-border-default))}.react-flow__nodesselection-rect:focus,.react-flow__selection:focus{outline:none}.react-flow__nodesselection-rect:focus-visible{outline:none}.react-flow__selection:focus-visible{outline:none}.react-flow__controls-button:hover{background:var(--xy-controls-button-background-color-hover-props,var(--xy-controls-button-background-color-hover,var(--xy-controls-button-background-color-hover-default)));color:var(--xy-controls-button-color-hover-props,var(--xy-controls-button-color-hover,var(--xy-controls-button-color-hover-default)))}.react-flow__controls-button:disabled{pointer-events:none}.react-flow__controls-button:disabled svg{fill-opacity:.4}.react-flow__controls-button:last-child{border-bottom:none}.react-flow__controls.horizontal .react-flow__controls-button{border-bottom:none;border-right:1px solid var(--xy-controls-button-border-color-props,var(--xy-controls-button-border-color,var(--xy-controls-button-border-color-default)))}.react-flow__controls.horizontal .react-flow__controls-button:last-child{border-right:none}.react-flow__resize-control{position:absolute}.react-flow__resize-control.left,.react-flow__resize-control.right{cursor:ew-resize}.react-flow__resize-control.top,.react-flow__resize-control.bottom{cursor:ns-resize}.react-flow__resize-control.top.left,.react-flow__resize-control.bottom.right{cursor:nwse-resize}.react-flow__resize-control.bottom.left,.react-flow__resize-control.top.right{cursor:nesw-resize}.react-flow__resize-control.handle{background-color:var(--xy-resize-background-color,var(--xy-resize-background-color-default));border:1px solid #fff;border-radius:1px;width:5px;height:5px;translate:-50% -50%}.react-flow__resize-control.handle.left{top:50%;left:0}.react-flow__resize-control.handle.right{top:50%;left:100%}.react-flow__resize-control.handle.top{top:0;left:50%}.react-flow__resize-control.handle.bottom{top:100%;left:50%}.react-flow__resize-control.handle.top.left,.react-flow__resize-control.handle.bottom.left{left:0}.react-flow__resize-control.handle.top.right,.react-flow__resize-control.handle.bottom.right{left:100%}.react-flow__resize-control.line{border-color:var(--xy-resize-background-color,var(--xy-resize-background-color-default));border-style:solid;border-width:0}.react-flow__resize-control.line.left,.react-flow__resize-control.line.right{width:1px;height:100%;top:0;transform:translate(-50%)}.react-flow__resize-control.line.left{border-left-width:1px;left:0}.react-flow__resize-control.line.right{border-right-width:1px;left:100%}.react-flow__resize-control.line.top,.react-flow__resize-control.line.bottom{width:100%;height:1px;left:0;transform:translateY(-50%)}.react-flow__resize-control.line.top{border-top-width:1px;top:0}.react-flow__resize-control.line.bottom{border-bottom-width:1px;top:100%}.react-flow__edge-textbg{fill:var(--xy-edge-label-background-color,var(--xy-edge-label-background-color-default))}.react-flow__edge-text{fill:var(--xy-edge-label-color,var(--xy-edge-label-color-default))}html,body{background:var(--prism-canvas);color:var(--prism-ink);font-family:var(--prism-font,Inter,system-ui,sans-serif);height:100%;margin:0}#root{height:100%}.console{display:flex;overflow:hidden;flex-direction:column;height:100%;min-height:100%;max-height:100vh}.console__bar{position:sticky;z-index:5;display:flex;border-bottom:1px solid var(--prism-line,#2a334a);background:color-mix(in oklab,var(--prism-canvas,#0b0f1a)92%,transparent);backdrop-filter:blur(8px);align-items: center;gap:24px;padding:12px 24px;top:0}.console__brand{display:flex;align-items: center;gap:10px}.console__mark-img{display:block;border-radius:6px;width:22px;height:22px}.console__wordmark{display:flex;align-items:baseline;gap:7px;line-height:1}.console__wordmark-prism{letter-spacing:-.04em;color:var(--prism-ink,#fff);font-size:16px;font-weight:700}.console__wordmark-dispatch{letter-spacing:-.02em;color:var(--prism-brand,#00c2c2);font-family:Iowan Old Style,Palatino,Palatino Linotype,Book Antiqua,Georgia,serif;font-size:17px;font-style:italic;font-weight:500}.console__nav{display:flex;gap:4px}.console__tab{color:var(--prism-ink-muted,#94a3b8);cursor:pointer;background:0 0;border:1px solid #0000;border-radius:8px;padding:6px 12px;font-size:13px}.console__tab:hover{color:var(--prism-ink,#fff)}.console__tab--on{border-color:color-mix(in oklab,var(--prism-brand,#00c2c2)45%,transparent);background:color-mix(in oklab,var(--prism-brand,#00c2c2)12%,transparent);color:var(--prism-brand,#00c2c2)}.console__tab-badge{display:inline-flex;color:#fff;background:#f973168c;background:lab(64.4963% 49.3667 68.6636/.55);border-radius:999px;justify-content:center;align-items: center;min-width:1.25rem;height:1.25rem;margin-left:6px;padding:0 5px;font-size:11px;font-weight:600;line-height:1}.console__panel--note{padding-top:0}.console__tab:focus-visible{outline:2px solid var(--prism-brand,#00c2c2);outline-offset:2px}.console__main{overflow-y:auto;flex:1;width:100%;max-width:1120px;min-height:0;margin:0 auto;padding:28px 24px 24px}.console__main--findings{overflow:hidden;display:flex;flex-direction:column}.console__main--findings .console__panel{flex:1;min-height:0}@supports (scrollbar-color: auto){.console__main,.findings-doc,.md-doc__table-wrap{scrollbar-color:color-mix(in oklab,var(--prism-brand,#00c2c2)45%,transparent)transparent;scrollbar-width:thin}}.console__main::-webkit-scrollbar{width:10px;height:10px}.findings-doc::-webkit-scrollbar{width:10px;height:10px}.md-doc__table-wrap::-webkit-scrollbar{width:10px;height:10px}.console__main::-webkit-scrollbar-track{background:0 0}.findings-doc::-webkit-scrollbar-track{background:0 0}.md-doc__table-wrap::-webkit-scrollbar-track{background:0 0}.console__main::-webkit-scrollbar-thumb{background:color-mix(in oklab,var(--prism-brand,#00c2c2)32%,transparent);background-clip:content-box;border:3px solid #0000;border-radius:999px}.findings-doc::-webkit-scrollbar-thumb{background:color-mix(in oklab,var(--prism-brand,#00c2c2)32%,transparent);background-clip:content-box;border:3px solid #0000;border-radius:999px}.md-doc__table-wrap::-webkit-scrollbar-thumb{background:color-mix(in oklab,var(--prism-brand,#00c2c2)32%,transparent);background-clip:content-box;border:3px solid #0000;border-radius:999px}.console__main::-webkit-scrollbar-thumb:hover{background:color-mix(in oklab,var(--prism-brand,#00c2c2)55%,transparent);background-clip:content-box}.findings-doc::-webkit-scrollbar-thumb:hover{background:color-mix(in oklab,var(--prism-brand,#00c2c2)55%,transparent);background-clip:content-box}.md-doc__table-wrap::-webkit-scrollbar-thumb:hover{background:color-mix(in oklab,var(--prism-brand,#00c2c2)55%,transparent);background-clip:content-box}.console__panel{display:grid;gap:16px}.console__title{margin:0;font-size:24px;font-weight:600}.console__loading{color:var(--prism-ink-muted,#94a3b8);margin:0;font-size:14px}.console__repos{list-style:none;display:grid;gap:10px;margin:0;padding:0}.console__repo{display:flex;border:1px solid var(--prism-line,#2a334a);background:var(--prism-panel,#131926);border-radius:12px;justify-content:space-between;align-items: center;gap:16px;padding:14px 16px}.console__repo-path{display:block;color:var(--prism-ink-muted,#94a3b8);margin-top:4px;font-size:12px}.console__repo-count{color:var(--prism-ink-muted,#94a3b8);white-space:nowrap;font-size:13px}.console__repo-error{color:#ff9d9d;font-size:13px}.console__facts{display:flex;border:1px solid var(--prism-line,#2a334a);background:var(--prism-panel,#131926);border-radius:12px;flex-wrap:wrap;gap:24px;margin:0;padding:16px}.console__facts dt{text-transform:uppercase;letter-spacing:.05em;color:var(--prism-ink-muted,#94a3b8);font-size:10px}.console__facts dd{margin:4px 0 0;font-size:14px}.console__lede{color:var(--prism-ink-muted,#94a3b8);margin:0;font-size:14px;line-height:1.5}.console .jobs-screen{padding:0}.dispatch-settings{display:grid;gap:20px;max-width:720px}.dispatch-settings__group{border:1px solid var(--prism-line,#2a334a);display:grid;border-radius:12px;gap:14px;margin:0;padding:16px 18px}.dispatch-settings__group legend{padding:0 6px;font-size:13px;font-weight:600}.dispatch-settings__lede{color:var(--prism-ink-muted,#94a3b8);margin:4px 0 0;font-size:12px;line-height:1.45}.dispatch-settings__toggles{display:grid;grid-template-columns:repeat(auto-fill,minmax(168px,1fr));gap:8px}.dispatch-settings__toggles .prism-toggle{border:1px solid var(--prism-line,#2a334a);background:color-mix(in oklab,var(--prism-panel,#131926)70%,transparent);border-radius:10px;align-items: center;margin:0;padding:10px 12px}.dispatch-settings__field{display:grid;color:var(--prism-ink-muted,#94a3b8);gap:6px;font-size:13px}.dispatch-settings__actions{display:flex;align-items: center;gap:12px}.dispatch-settings__save{background:var(--prism-brand,#00c2c2);color:#041414;cursor:pointer;border:0;border-radius:8px;padding:8px 16px;font-weight:600}.dispatch-settings__save:disabled{opacity:.6;cursor:not-allowed}.console-toast{position:fixed;z-index:1000;color:#47d18a;pointer-events:none;background:#0e1d16;background:lab(9.40537% -8.54918 3.12295);border:1px solid #47d18a73;border:1px solid color(display-p3 .442997 .80861 .564477/.45);border:1px solid lab(75.2337% -50.9448 24.0043/.45);border-radius:10px;margin:0;padding:10px 16px;font-size:13px;font-weight:600;bottom:24px;right:24px;box-shadow:0 10px 28px #0006}@media (prefers-reduced-motion:no-preference){.console-toast{animation:console-toast-in .18s ease-out}}@keyframes console-toast-in{0%{opacity:0;transform:translateY(8px)}to{opacity:1;transform:translateY(0)}}.prism-menu-field{position:relative;display:grid;gap:6px}.prism-menu-field__label{color:var(--prism-ink-muted,#94a3b8);font-size:13px}.prism-menu-field__hint{color:var(--prism-ink-muted,#94a3b8);font-size:12px}.prism-menu{display:flex;box-sizing:border-box;border:1px solid var(--prism-line,#2a334a);background:var(--prism-panel,#131926);color:var(--prism-ink,#fff);font:inherit;text-align:left;cursor:pointer;border-radius:10px;justify-content:space-between;align-items: center;gap:10px;width:100%;padding:9px 12px;font-size:13px}.prism-menu:hover,.prism-menu--open{border-color:color-mix(in oklab,var(--prism-brand,#00c2c2)45%,transparent)}.prism-menu__list{position:absolute;z-index:8;list-style:none;border:1px solid var(--prism-line,#2a334a);background:var(--prism-panel,#131926);border-radius:10px;margin:0;padding:6px;top:calc(100% + 4px);left:0;right:0;box-shadow:0 12px 32px #00000059}.prism-menu__option{display:flex;color:var(--prism-ink,#fff);font:inherit;text-align:left;cursor:pointer;background:0 0;border:0;border-radius:8px;justify-content:space-between;align-items: center;gap:10px;width:100%;padding:8px 10px;font-size:13px}.prism-menu__option:hover,.prism-menu__option--on{background:color-mix(in oklab,var(--prism-brand,#00c2c2)14%,transparent)}.prism-toggle{display:flex;cursor:pointer;align-items: flex-start;gap:10px}.prism-toggle__control{cursor:pointer;background:#2a334a;border:0;border-radius:999px;flex-shrink:0;width:36px;height:22px;margin-top:1px;padding:2px}.prism-toggle__control--on{background:var(--prism-brand,#00c2c2)}.prism-toggle__knob{display:block;background:#fff;border-radius:50%;width:18px;height:18px;transition:transform .16s;transform:translate(0)}.prism-toggle__control--on .prism-toggle__knob{transform:translate(14px)}.prism-toggle__copy{display:grid;gap:2px}.prism-toggle__label{color:var(--prism-ink,#fff);font-size:13px}.prism-toggle__hint{color:var(--prism-ink-muted,#94a3b8);font-size:12px}.intel-stats{display:grid;grid-template-columns:repeat(auto-fit,minmax(120px,1fr));gap:10px;margin:0}.intel-stats>div{border:1px solid var(--prism-line,#2a334a);background:color-mix(in oklab,var(--prism-panel,#131926)80%,transparent);border-radius:10px;padding:12px 14px}.intel-stats dt{letter-spacing:.04em;text-transform:uppercase;color:var(--prism-ink-muted,#94a3b8);font-size:11px}.intel-stats dd{margin:6px 0 0;font-size:22px;font-weight:650}.intel-heading{margin:8px 0 0;font-size:15px}.intel-heading--tip{display:flex;align-items: center;gap:8px}.intel-list{list-style:none;display:grid;gap:8px;margin:0;padding:0}.intel-list li{display:grid;border:1px solid var(--prism-line,#2a334a);border-radius:10px;gap:4px;padding:12px 14px}.intel-list__repo{grid-template-columns:1fr auto;align-items: center;gap:12px}.intel-list__copy{display:grid;gap:4px;min-width:0}.intel-list__go{display:grid;border:1px solid color-mix(in oklab,var(--prism-brand,#00c2c2)40%,transparent);color:var(--prism-brand,#00c2c2);text-decoration:none;border-radius:999px;place-items: center;width:36px;height:36px}.intel-list__go:hover{background:color-mix(in oklab,var(--prism-brand,#00c2c2)14%,transparent)}.intel-list code{color:var(--prism-ink-muted,#94a3b8);overflow-wrap:anywhere;font-size:12px}.intel-list__error{color:#f87171;font-size:12px}.intel-chips{display:flex;list-style:none;flex-wrap:wrap;gap:8px;margin:0;padding:0}.intel-chips li{border:1px solid color-mix(in oklab,var(--prism-brand,#00c2c2)35%,transparent);background:color-mix(in oklab,var(--prism-brand,#00c2c2)10%,transparent);border-radius:999px;padding:6px 10px;font-size:12px}.intel-load{background:var(--prism-brand,#00c2c2);color:#041414;cursor:pointer;border:0;border-radius:8px;flex-shrink:0;justify-self:start;width:auto;min-width:9.5rem;padding:8px 16px;font-weight:600}.intel-analysis{display:flex;justify-content:space-between;align-items: flex-start;gap:16px}.intel-analysis__copy{min-width:0}.intel-analysis .intel-heading,.intel-analysis .console__lede{margin-top:0}.intel-load:disabled{opacity:.6;cursor:not-allowed}.console-footer{display:flex;border-top:1px solid var(--prism-line,#2a334a);background:var(--prism-canvas,#0b0f1a);z-index:4;flex-wrap:wrap;flex-shrink:0;justify-content:space-between;align-items: center;gap:12px 24px;margin-top:0;padding:12px 24px 16px}.console-footer__brand{display:flex;align-items:baseline;gap:8px;font-size:13px}.console-footer__dispatch{color:var(--prism-brand,#00c2c2);font-family:Iowan Old Style,Palatino,Palatino Linotype,Book Antiqua,Georgia,serif;font-style:italic}.console-footer__ver{color:var(--prism-ink-muted,#94a3b8);font-size:12px}.console-footer__links{display:flex;flex-wrap:wrap;gap:12px 16px}.console-footer__links a{color:var(--prism-ink-muted,#94a3b8);text-decoration:none;font-size:12px}.console-footer__links a:hover{color:var(--prism-brand,#00c2c2)}@media (max-width:720px){.console__bar{flex-direction:column;align-items: flex-start;gap:10px}.console__nav{flex-wrap:wrap}.console__repo{flex-direction:column;align-items: flex-start}}.findings-index{list-style:none;display:grid;gap:8px;margin:0;padding:0}.findings-index a{display:grid;border:1px solid var(--prism-line,#2a334a);color:inherit;text-decoration:none;border-radius:10px;gap:4px;padding:12px 14px}.findings-index a:hover{border-color:color-mix(in oklab,var(--prism-brand,#00c2c2)40%,transparent)}.findings-index__row{display:flex;justify-content:space-between;align-items:baseline;gap:12px}.findings-index__row strong{min-width:0}.findings-index time{font-family:var(--prism-font-mono,ui-monospace,monospace);color:var(--prism-ink-muted,#94a3b8);flex-shrink:0;font-size:11px}.findings-index__meta{color:var(--prism-ink-muted,#94a3b8);font-size:12px}.findings-index code,.findings-files a,.findings-doc code{font-family:var(--prism-font-mono,ui-monospace,monospace);color:var(--prism-brand,#00c2c2);font-size:12px}.findings-files{list-style:none;display:flex;flex-wrap:wrap;gap:8px;margin:0 0 16px;padding:0}.findings-files a{border:1px solid var(--prism-line,#2a334a);text-decoration:none;border-radius:999px;padding:4px 10px}.findings-files__on{border-color:color-mix(in oklab,var(--prism-brand,#00c2c2)45%,transparent);background:color-mix(in oklab,var(--prism-brand,#00c2c2)12%,transparent)}.findings-page{display:flex;flex-direction:column;flex:1;gap:16px;min-height:0}.findings-page__head{display:grid;justify-items:start;gap:8px}.findings-back{display:inline-flex;color:var(--prism-ink-muted,#94a3b8);text-decoration:none;align-items: center;gap:6px;margin:0;padding:0;font-size:13px;line-height:1}.findings-back:hover{color:var(--prism-brand,#00c2c2)}.findings-back:focus-visible{outline:2px solid var(--prism-brand,#00c2c2);outline-offset:2px;border-radius:4px}.findings-doc{overflow:auto;border:1px solid color-mix(in oklab,var(--prism-brand,#00c2c2)28%,transparent);background:color-mix(in oklab,var(--prism-panel,#131926)88%,transparent);border-radius:12px;flex:1;min-height:0;padding:16px 18px}